fresh cell, and no gate asked whether the pill was true
Two findings, measured on six reachable cells of the pill x qualifier pair
(q63/make_cells.py -> R34-CELLS.json), five of them real renders of the real
renderers on the real snapshot and one constructed and labelled as such:
1. G10's predicate (helm-selftest-q62.py:2782) demands both "not re-checked
since" and "as of ", but helm-render-plain.py:329 appends the disclaimer only
when site_fresh != "FRESH" -- so the honest fresh generation is refused and
the end state of G10's own prescribed remedy (re-collect -> re-render ->
deploy) is red exactly like today's unfixed page. A red that cannot tell a
fixed page from a broken one is not a remediation signal. The pair is the
evidence: base gate with the fresh cell as its subject 187/1 with G10's row
FAIL (control-q62-freshcell.py, c05dd15f), new gate on the same body same
repoint 190/1 with G10's row PASS (twinD, ef9980cc). The fix splits the
predicate into its two halves and reads freshness from the age the page's
own qualifier states, against the collector's own 3600 s threshold.
2. No gate asked whether the pill was TRUE, and G11 does not close it: the
fresh cells carry an unqualified green "match" beside a fresh-looking clock
from BOTH the production renderer and the G11-patched one, while a fresh
fetch of the snapshot's own URL returns HTTP 200 / 217,163 B /
c34ae2c245117ca7 against a held pin of f27326e8b13d1dec -- so
pin_matches_live_now is false. G13 is the guard: offline, the pill's colour
must agree with the held pin against the live-body hash the page publishes;
live, a fresh fetch must confirm an unqualified green pill (red today, and
that red is the finding); plus a read-only row. Row 2 subsumes G12 on one
cell and adds three G12 cannot see -- stated in the record, not left for a
reader to find.
Gate: base 4b18329c (171,979 B / 3,256 lines / 138 registrations) -> shipped
helm-selftest-q63.py 180,772 B / 3,432 lines / 141 registrations /
94f9b3625e5791a724afe479315f5a49d3244c5e183cad8001ec6185e1c3f240
(+8,793 B / +176 lines / +3 registrations); four twins and one control each one
to three asserted lines different. Subject 4e45021d80395d3f / 29,954 B
throughout. Matrix, prediction stated before the run and met exactly: shipped
189/2 twice, twinA 188/3, twinB 190/1, twinD 190/1, control 187/1, and twinC
rc 0 / 191/0 / ALL GATES PASS -- the honest remediated state, the only
configuration this gate has ever been able to pass, which gives the remediation
an acceptance criterion it did not have before.
Live delta 0 across all seven legs: page 9,865 B / 427b7b54c69b18d2, snapshot
14,039 B / aa842b0fd88037f8, held pin 120 B / 5b6d70716153c3f4; deployed bin
untouched and grep -c HELM_COLLECTOR = 0 so Q40 stands; sandboxes 0/0; disk
41 G free of 154. Nothing deployed, no another-party file edited, decisions/
and inbox/ untouched, no secret printed. Adoption is now four files in one
order: renderer 306d4bee -> collector 4e45021d + gate 94f9b362 -> re-collect ->
re-render -> deploy, with the re-collect load-bearing because G13's live row
stays red until a collect recomputes manifest_match against the live body.
Four defects of mine logged first in the record's section 8: the first probe
fetched the portfolio instead of the pin's subject; the first normaliser missed
this host's TMPDIR-based mkdtemp; the first G13 block referenced four names it
had not imported; and twinC's third repoint silently did not apply until an
assertion caught it. No queue item opened. Merlin <merlin@agents.invalid>.
Merlin
420c826382